Verifying primary and backup copies of vital information for a processing system employing a pseudo-fixed reference identifier

ABSTRACT

Verification of a primary or backup copy of vital information of a processing system employs a pseudo-fixed reference identifier, defined as an identifier unlikely to change over the life of the system, and controls which copy of vital information is correct. The primary copy of vital information is associated with a copy of the pseudo-fixed reference identifier and a backup copy of the vital information is associated with a copy of the pseudo-fixed reference identifier. A processor, when triggered, reads the pseudo-fixed reference identifier, compares it to the stored copies of the identifier of the primary and backup non-volatile storage. ( 1 ) If the read pseudo-fixed reference identifier matches the primary copy of the identifier, the processor indicates the vital information is valid. ( 2 ) If the read pseudo-fixed reference identifier matches the backup only, indicating that the backup copy of vital information is to be restore copied to become the primary copy.

CROSS-REFERENCE TO RELATED APPLICATION

[0001] This application is a continuation-in-part of U.S. applicationSer. No. 09/703,906, entitled “VERIFYING PRIMARY AND BACKUP COPIES OFVITAL INFORMATION FOR A LIBRARY EMPLOYING A MACHINE READABLE SERIALNUMBER IDENTIFIER”, which was filed in the U.S. Patent & TrademarkOffice on Nov. 2, 2000.

FIELD OF THE INVENTION

[0002] This invention relates to processor systems, such as embeddedsystems, an example of which is an automated data storage library havingat least one accessor for accessing data storage media in a plurality ofstorage shelves, and, more particularly, to processor systems whichemploy primary and backup non-volatile storage for storing primary andbackup copies of vital information for operating the processor system.

BACKGROUND OF THE INVENTION

[0003] Processor systems, such as embedded systems, require vitalinformation that describes the physical configuration, the logicalconfiguration, and the engineering changes of the system in which theprocessor(s) is embedded.

[0004] One example of an embedded system is an automated data storagelibrary. Data processing systems typically require large amounts of datastorage capacity, some of which is needed quickly and may be stored inmemory and hard disk drives, and other of which is not immediatelyrequired. As an example, data not immediately required may comprise datathat is infrequently accessed, and the storage of the data may be inremovable data storage media, such as magnetic tape cartridges oroptical disk cartridges, stored in automated data storage libraries forthe use of host data processing systems. Such automated data storagelibraries provide efficient access to large quantities of the datastorage media, which are stored in storage shelves and which areaccessed by one or more accessors and delivered to data storage drivesin the library. In one example, a magnetic tape cartridge automated datastorage library stores over 6,000 cartridges.

[0005] The data stored in automated data storage libraries is notfrequently accessed, but when needed, is needed promptly. Also, data tobe stored in a library builds up quickly and must be stored withoutundue delay. Thus, if the library, or the library controller computerprocessor, is subject to a power-on reset, it must come up to fullcapability as soon as possible so that the library is available toprovide data access and storage.

[0006] Typically, every library is at a different level with regard toengineering change levels, physical configuration, and logicalconfiguration, and has different calibration values, e.g., for aligningthe accessor. This information is called vital information, or vitalproduct data (VPD). In order to quickly bring a library controlleronline, vital information is stored in non-volatile storage and isaccessible by the computer processor. The stored vital information maybe accessed much more rapidly than a manual process can be employed tore-construct the vital information for a given library. Further, if thecause of the power-on reset was unexpected, and the vital informationwere unavailable for a manual entry, the down time could be drawn out.

[0007] Other examples of embedded systems which require vitalinformation include an aircraft “fly-by-wire” calibration system, apower generation system, a power distribution system, a distributedprocessor automotive system, and medical equipment.

[0008] It is very desirable to have an additional backup copy of thevital information in a separate backup non-volatile storage, forexample, in case the component or FRU (field replaceable unit)containing the primary copy of the vital information is removed andreplaced with a replacement FRU. In this case, the vital informationcould be restore copied to the replacement primary non-volatile storagefrom the backup non-volatile storage without requiring manualreconstruction. This backup copy might exist within the library onanother FRU, or external to the library, e.g., on the local servermanaged by library management software.

[0009] When a backup copy is implemented, the trigger for the backupevent must ensure that an invalid primary copy is never used to do abackup and that an invalid backup copy is never used to do a restore. Asone example, where a real-time clock is available, the primary andbackup copies may each be time stamped, and the time stamps comparedbefore backup or restore is initiated. An example of time-stampinginformation to indicate the currency of the information is described incoassigned U.S. Pat. No. 6,065,018, Beier et al. However, FRU swappingin the field could potentially undermine the check in that an invalidprimary copy of vital information from another machine might look morerecent than the valid backup copy.

[0010] As another example, multiple backup copies may be employed, and avote taken and the majority vote assumed to be correct. However, thecomparison takes time and provides no true assurance of correctness.

SUMMARY OF THE INVENTION

[0011] An object of the present invention is to provide verification ofa primary or backup copy of vital information.

[0012] In a one embodiment, for example, in a multi-node system, apseudo-fixed reference identifier is provided at a reference location inthe processing system.

[0013] A pseudo-fixed reference identifier is defined as an identifierthat is unlikely to be changed over the lifetime of the machine orsystem in which it is implemented, such as a machine serial number. Thepseudo-fixed reference identifier is employed to control which copy ofvital information is correct, as opposed to time stamps or votingschemes. Primary non-volatile storage is provided at a node of theprocessing system separate from and coupled to the reference location,for storing a primary copy of vital information, and for storing a copyof the pseudo-fixed reference identifier associated with the primarycopy of the vital information. Backup non-volatile storage is providedat a node of the processing system coupled to the primary non-volatilestorage, for storing a backup copy of the vital information, the backupcopy copied from the primary copy of vital information and associatedwith a copy of the pseudo-fixed reference identifier. At least oneprocessor is coupled to the reference location, the primary non-volatilestorage and the backup non-volatile storage. In accordance with anembodiment of a processor implemented method, the processor:

[0014] upon a reset identified by the processor, reads the pseudo-fixedreference identifier from the reference location;

[0015] compares the read pseudo-fixed reference identifier to the storedcopies of the pseudo-fixed reference identifier of the primarynon-volatile storage and the backup non-volatile storage; and

[0016] if the read pseudo-fixed reference identifier matches the primarystored copy of the pseudo-fixed reference identifier, the processorindicates the vital information is valid; if the read pseudo-fixedreference identifier matches the backup stored copy of a pseudo-fixedreference identifier only, the backup copy of vital information iscorrect and is to be restore copied as the primary copy.

[0017] As defined above, a pseudo-fixed reference comprises a referencethat is unlikely to be altered over time, as compared to the time inwhich components or FRUs (field replaceable units) are subject toreplacement. One example is a sensible indicator, such as a fixed barcode label which is read by a reader. Another example is anelectronically readable “electronic serial number” fixed in anelectronic module. A further example is an arrangement of I/O pins.Other examples comprise settable switches of an electronic module, suchas manually settable “DIP” switches or manually settable multi-positionswitches. A still further example comprises a value stored in anon-volatile memory device, such as a PROM, battery backup RAM, FPGA,ASIC, etc.

[0018] In an embodiment of an automated data storage library having aplurality of storage shelves for storing data storage media, at leastone accessor for accessing the data storage media in the plurality ofstorage shelves, a machine readable serial number identifier isprovided, comprising the pseudo-fixed reference identifier. Apositionable reader reads the machine readable serial number identifierunder the control of a library controller. Primary and backupnon-volatile storage are provided for storing primary and backup copiesof the vital information. The library controller comprises at least onecomputer processor which is coupled to the accessor, the positionablereader, and to the primary and backup non-volatile storage.Additionally, the library controller stores programs for operating thelibrary in accordance with the vital information.

[0019] An embodiment of a computer implemented method of verifying theprimary and backup copies of vital information for the library comprisesstoring a copy of the pseudo-fixed reference identifier, comprising theserial number identifier, associated with the primary copy of the vitalinformation of the primary non-volatile storage; and copying the primarycopy of vital information to the backup non-volatile storage as thebackup copy and associated with the serial number identifier.

[0020] In accordance with the computer implemented method, upon apower-on reset of the computer processor, the positionable reader isoperated to read the machine readable serial number identifier; the readserial number identifier is compared to the stored serial numberidentifiers of the primary storage and the backup storage, and:

[0021] if the read serial number identifier (which is the pseudo-fixedreference identifier) matches the primary stored serial numberidentifier (which is the copy of the pseudo-fixed reference identifier),the primary copy of vital information is correct; and

[0022] if the read serial number identifier matches the backup storedcopy of the serial number identifier only, the processor restore copiesthe backup copy of vital information to the primary non-volatile storageas the primary copy.

[0023] Additionally, in the processing system, if the read pseudo-fixedreference identifier fails to match either the primary stored copy ofthe pseudo-fixed reference identifier or the backup stored copy of thepseudo-fixed reference identifier, or if the pseudo-fixed referenceidentifier can't be read, the primary and backup copies of thepseudo-fixed reference identifier are compared. If they match, theprocessor indicates that the vital information is valid. If they don'tmatch, the processor provides an error indication.

[0024] For a fuller understanding of the present invention, referenceshould be made to the following detailed description taken inconjunction with the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

[0025]FIGS. 1 and 2 are perspective views of an embodiment of anautomated data storage library in which primary and backup copies ofvital information for the library are verified employing a pseudo-fixedreference identifier;

[0026]FIG. 3 is a block diagram of the automated data storage library ofFIGS. 1 and 2;

[0027]FIG. 4 is an illustration of a pseudo-fixed reference identifiercomprising a positionable reader in proximity to a machine readableserial number identifier and a bank of storage shelves of the library ofFIGS. 1 and 2;

[0028]FIGS. 5A and 5B are illustrations of alternative embodiments ofthe machine readable serial number identifier of FIG. 4;

[0029]FIGS. 6 and 7 are flow charts depicting embodiments of thecomputer implemented method in accordance with the present invention forconducting verification and backup and restore of vital informationemploying a pseudo-fixed reference identifier;

[0030]FIG. 8 is a block diagram of a multi-node processing networkemploying various examples of pseudo-fixed reference identifiers forconducting verification and backup and restore of vital information; and

[0031] FIGS. 9-13 comprise examples of pseudo-fixed referenceidentifiers.

DETAILED DESCRIPTION OF THE INVENTION

[0032] This invention is described in preferred embodiments in thefollowing description with reference to the Figures, in which likenumbers represent the same or similar elements. While this invention isdescribed in terms of the best mode for achieving this invention'sobjectives, it will be appreciated by those skilled in the art thatvariations may be accomplished in view of these teachings withoutdeviating from the spirit or scope of the invention.

[0033] Referring to FIGS. 1, 2 and 3, an embodiment of a systemadvantageously employing the present invention is illustrated,comprising an automated data storage library in which components or FRUs(field replaceable units) are subject to replacement. As discussedabove, it is desirable to have a backup copy of the vital information ina separate backup non-volatile storage in case the component or FRUcontaining the primary copy of the vital information is removed andreplaced with a replacement FRU. In this case, the vital informationcould be restore copied to the replacement primary non-volatile storagefrom the backup non-volatile storage without requiring manualintervention. This backup copy might exist within the library on anotherFRU, or external to the library, e.g., on the local server or a hostserver managed by library management software.

[0034] The specific automated data storage library 10 illustrated inFIGS. 1-3 comprises one or more data storage drives 12, for example, forreading and/or writing data on removable data storage media 14, such asmagnetic tape cartridges or optical disk cartridges. A plurality of thedata storage media 14 are stored in banks of storage shelves 16. Anaccessor 18 mounts a picker 20, and moves horizontally on rails 340 and350 and vertically to move the picker to access data storage media 14and transport the media amongst the data storage drives 12, the storageshelves 16, and an input/output station 23. An example of an automateddata storage library which may implement the present invention is theIBM 3494 Automated Tape Library, which stores magnetic tape cartridges.

[0035] A library controller 24 is provided which may comprise at leastone microprocessor 25, a non-volatile memory device 26, such as a diskdrive and/or flash memory, and input/output circuits or adapters 27,such as serial ports or register I/O. The controller is coupled with,and controls the operation of, the accessor 18 and picker 20, and mayinterface with the data storage drives 12. The controller may be coupledto one or more of the input/output stations 23, which allow the transferof data storage media 14 into and out of the library. The librarycontroller 24 may be further coupled to an operator panel 30, and isalso coupled to a host system 28, typically via an interface 29, such asSCSI ports. The controller 24 receives access commands from the hostsystem 28 for the selection and transport of data storage media 14amongst the data storage drives 12, the storage shelves 16, and theinput/output station 23. The host system 28 may be coupled to the drives12, and information to be recorded on, or to be read from, selected datastorage media 14 may be transmitted between the drives and the hostsystem 28. Alternatively, the library controller may be coupled to thedata storage drives 12, and transfers the data between the drives andthe host system.

[0036] The library controller 24 stores programs for operating thelibrary in accordance with the vital information. The library controllermay comprise one or a plurality of programmable microprocessors 25 whichare operated by one or more operating systems and one or moreapplication programs for operating the library, in accordance with thepresent invention. One example of a suitable processor comprises an IBMPower PC processor. The application programs may comprise programproducts, having processor readable program code. A program product maybe supplied electronically, as from a network of the host system 28, atcommunications interface 29. Alternatively, the program product may besupplied at an input terminal of the processor, such as operator panel30, from a storage media which stores executable instructions, andcomprises an article of manufacture. An example of a storage media whichis an article of manufacture is a magnetic diskette. Other suitablestorage media are optical disks, removable hard disk cartridges, readonly memories (ROM) or programmable read only memories (PROM). Therequirement for the storage media or memories is that they store digitalrepresentations of executable instructions. The operating systems andapplication programs are stored in memory, for example, in thenon-volatile memory device 26.

[0037] The library controller 24 may comprise one or more FRUs which aretypically subject to update or upgrades, or may require repair actions,requiring the addition or replacement of the FRU or removablecomponents. Additionally, the controller may be subject to power offsituations while other components or FRUs of the library are replaced,upgraded or subject to service actions. Further, every library may be ata different level with regard to engineering change levels, physicalconfiguration, and logical configuration, and may have differentcalibration values, e.g., for aligning the accessor. As discussed above,this information is called vital information. In order to quickly bringa library controller online, the vital information is stored in thenon-volatile storage 26 and is accessible by the processor 25. Thestored vital information may be accessed much more rapidly than a manualprocess can be employed to re-construct the vital information for agiven library. Further, if the cause of the power-on reset wasunexpected, and the vital information were unavailable for a manualprocess, the down time could be drawn out.

[0038] A backup copy of the vital information is provided in a separatebackup non-volatile storage 34. Thus, the vital information may berestore copied to the replacement primary non-volatile storage from thebackup non-volatile storage without requiring manual intervention. Thisbackup copy might exist with another FRU in the library coupled to themicroprocessor 25, or with another microprocessor 35 in the library onanother FRU, or external to the library, e.g., on the local server or ahost server managed by library management software.

[0039] When a backup copy is made, the backup event must ensure that aninvalid primary copy is never used to do a backup, and an invalid backupcopy must never be used to do a restore.

[0040] Hence, in accordance with the present invention, a pseudo-fixedreference identifier is provided at a fixed reference location of theprocessing system. A pseudo-fixed reference identifier is defined as anidentifier that is unlikely to be changed over the lifetime of themachine or system in which it is implemented, such as a machine serialnumber. The pseudo-fixed reference identifier is employed to controlwhich copy of vital information is correct, as opposed to time stamps orvoting schemes. Referring to FIGS. 1-5, one example of a pseudo-fixedreference identifier comprises a machine readable serial numberidentifier 47, mounted on the frame of the library, for example, bymeans of a mounting plate 48 on a bracket 49 fixed to the frame suchthat the machine readable serial number identifier 47 is at apredetermined location of the frame. Herein, “serial number” shall bedefined as any unique identifier for the particular library, and themachine readable identifier comprises any sensible indicator. Anotherexample of a pseudo-fixed reference indicator comprises anelectronically readable “electronic serial number” fixed in anelectronic module. A further example is an arrangement of I/O pins.Other examples comprise settable switches of an electronic module, suchas manually settable “DIP” switches or manually settable multi-positionswitches. A still further example comprises a value, such as a randomnumber, millisecond counter output, or a microsecond counter output, setat set up, configuration or manufacturing time, which may be stored in anon-volatile memory device, such as a PROM, battery back-up RAM, FPGA,ASIC, etc. As discussed above, the value is not subject to change duringnormal operation.

[0041] Referring additionally to FIG. 5A, one example of the machinereadable serial number identifier 47A may comprise a bar code label orother sensible indicator. Referring additionally to FIG. 5B, anotherexample of the machine readable serial number identifier 47B maycomprise a contactless transceiver, such as an RF “Smart Card”transceiver or other contactless memory. A positionable reader 40, suchas a bar code reader, is provided for reading the machine readableserial number identifier. In the operation of the library, thepositionable reader may also be employed for reading the bar code labels45 which identify each of the data storage media 14. The reader may bemounted on the accessor 18, either directly, or on the picker 20, to bemoved to the machine readable serial number identifier 47 for readingthe serial number identifier.

[0042] The computer processor 25 of the library controller 24 isassociated with the primary non-volatile storage 26 for storing theprimary copy of the vital information, for example, when the vitalinformation is first stored or updated. The serial number identifier isread and stored associated with the primary copy of the vitalinformation of the primary non-volatile storage. Then, the primary copyof vital information is copied to the backup non-volatile storage 34 asthe backup copy, and the serial number identifier copied and stored suchthat the serial number is associated with the backup copy of vitalinformation. In this context, “associated” is defined herein as notnecessarily stored directly with or adjacent the vital information, butaccessible at substantially the same time, for example, as stored atdiffering addresses within the same or another non-volatile storage.

[0043] In accordance with the present invention, upon a power-on resetof the computer processor 25, or a reset sensed by the computerprocessor, the positionable reader 40 is operated to read the machinereadable serial number identifier 47. The library controller comparesthe read serial number identifier to the stored serial numberidentifiers of the primary storage 26 and the backup storage 34. If theread serial number identifier matches the primary stored serial numberidentifier, the primary copy of vital information is indicated ascorrect. If the read serial number identifier matches the backup storedserial number identifier only, the backup copy of vital information withthe serial number identifier is to be restore copied to the primarynon-volatile storage 26 as the primary copy. The restore copy may beconducted automatically by the computer processor, or a message sent to,e.g., the operator panel 30 so an operator may determine the timing ofthe restore copy function, e.g., after other changes are made.

[0044] Thus, in each of the situations, the primary and the backupcopies of the vital information are validated.

[0045] If the primary copy of vital information has been validated, asabove, it may be copied to the backup non-volatile storage 34, with theserial number identifier, as a new backup copy. Thus, if the primarycopy has been updated, the backup copy is now also updated, as will bediscussed.

[0046] If the read serial number fails to match either the primarystored serial number identifier or the backup stored serial numberidentifier, there is no guarantee that both the primary and backupcopies of the vital information are valid. Thus, in one embodiment ofthe invention, if the primary stored serial number identifier fails tomatch the backup stored serial number identifier, the library controller24 provides an error indication. But if the primary stored serial numbermatches the backup stored serial number identifier, operation of thelibrary is continued, and a warning indication is provided, indicating alikely problem with the machine readable serial number identifier 47.

[0047] As alternative embodiments, the pseudo-fixed reference identifiermay be located at a reference location of the processing system,separate from and coupled to the primary non-volatile memory 26, andseparate from and coupled to the processor 25, for example, at accessor18, comprising pseudo-fixed reference 31. As another example, thepseudo-fixed reference may be coupled to another processor 35,comprising the pseudo-fixed reference 32. A still further examplecomprises pseudo-fixed reference 33 located at the library controller24, but which pseudo-fixed reference is a separate replaceable partcoupled to the primary non-volatile memory and the processor 25, forexample, by being located at the mount for the “motherboard” of thelibrary controller.

[0048] The functioning of the library is the same as described aboveexcept that the library controller 24 does not operate the accessor 18to move the reader 40 to read the machine readable serial number, butinstead directly reads the pseudo-fixed reference identifier. Thepseudo-fixed reference identifier, the primary copy, and the backup copymust all reside on separate replaceable parts, where the pseudo-fixedreference identifier is unlikely to be replaced.

[0049] As discussed above, a pseudo-fixed reference comprises anreference that is unlikely to be altered over time, as compared to thetime in which components or FRUs are subject to replacement. One exampleis a sensible indicator, such as the fixed bar code label which is readby a reader. Another example is an electronically readable “electronicserial number” fixed in an electronic module. A further example is anarrangement of I/O pins. Other examples comprise settable switches of anelectronic module, such as manually settable “DIP” switches or manuallysettable multi-position switches. A still further example comprises avalue stored in a non-volatile memory, such as a PROM, battery back-upRAM, FPGA, ASIC, etc. The value may originally be obtained from a randomnumber generator, a millisecond counter output, or a microsecond counteroutput, and set at set up, configuration or manufacturing time, but,once set, cannot be subject to change during normal operation.

[0050] An embodiment of the method for providing the primary and backupcopies of the vital information with the pseudo-fixed reference isillustrated in FIG. 6. With additional reference to FIGS. 1-5, themethod begins when the system is provided, for example, with theproduction of the automated data storage library 10, such as, at amanufacturing facility, or during set up at a customer facility, in step50.

[0051] In step 51, the pseudo-fixed reference is established. Asdifferent examples, the pseudo-fixed reference identifier 31 is fixed ataccessor 18, pseudo-fixed reference identifier 32 is fixed at anotherprocessor 35, pseudo-fixed reference identifier 33 is fixed at thelibrary controller, or machine readable serial number identifier 47 isfixed in the library mounted at a predetermined location of the frame ofthe library. The pseudo-fixed reference identifier 31, 32, 33 or machinereadable serial number 47 is arranged to be separate from, but coupledto, the library controller processor 25 and the primary non-volatilememory 26.

[0052] In step 53, the vital information is loaded in the primarynon-volatile storage 26, for example, with a manual process, such asfrom an operator panel 30, or as the result of set up, configuration,calibration, etc. Then, in step 55, the library controller reads thepseudo-fixed identifier. For example, the library controller operatesthe positionable reader 40 to read the machine readable serial numberidentifier 47, or directly reads the pseudo-fixed reference identifier31, 32, or 33. The read pseudo-fixed reference identifier is then, instep 57, stored as a copy of the pseudo-fixed reference identifierassociated with the vital information stored in the primary non-volatilestorage 26. Lastly, in step 58, the primary copy of vital informationwith the pseudo-fixed reference identifier is copied to the backupnon-volatile storage 34 as the backup copy. The primary or backup copyof the pseudo-fixed reference identifier may be stored in a separatefield or separate memory device from the primary and/or backup copy, butshould be part of the same replaceable part.

[0053] Thus, both the primary and the backup copies of the vitalinformation start out as current, and, in accordance with the presentinvention, both have copies of the pseudo-fixed reference identifier.

[0054] Referring additionally to FIG. 7, as discussed above, a librarycontroller computer processor 25 may be subject to a power-on resetsituation 60 for any of several reasons, one of which may involve areplacement of the FRU containing the primary non-volatile store 26.Alternatively, the processor 25, or another processor requiring thevital information, as will be explained, may be reset without requiringa replacement of the FRU. As one example, the program code may beupgraded and “rebooted” without powering down the processor, and theprocessor is reset either automatically or by the operator upon theconclusion of the upgrade, in step 62. Thus, the reset is sensed by theprocessor in step 68. Herein, “reboot” may comprise (a) a power-on of aprocessor involving a power-on reset, (b) a manual reset of a processor,(c) a software instruction or command to cause a processor to run itsboot code, or (d) any other initialization process resulting in alteringan existing program and running the boot code.

[0055] In the example of the library having the machine readable serialnumber, in response to a power-on reset of the computer processor 25,the library controller, in step 61, operates the accessor 18 of thelibrary to move the positionable reader 40 to substantially thepredetermined location of the frame of the library where the machinereadable serial number identifier 47 is mounted. In step 63, thepositionable reader 40 is operated to read the machine readable serialnumber identifier 47. Alternatively, if the machine readable serialnumber is not the pseudo-fixed reference identifier, step 61 is skipped,and step 63 comprises directly reading the pseudo-fixed referenceidentifier 31, 32, 33.

[0056] Step 78 determines whether the positionable reader 40, in thereading step 63, was able to read the pseudo-fixed reference identifier31, 32, 33, or 47. Examples of inability to read include failure of thecoupling to the pseudo-fixed reference identifier 31, 32, 33, failure ofthe reader 40, or failure of the accessor 18 to move the reader 40 tothe correct location, or the label is bad.

[0057] If the pseudo-fixed reference identifier 31, 32, 33, or 47 cannotbe read, the process proceeds to step 77 which will be discussedhereinafter. If the pseudo-fixed reference identifier 31, 32, 33, or 47was read in step 63, it is stored in memory, such as the RAM ofprocessor 25, in step 64. This copy of the pseudo-fixed referenceidentifier may be temporarily stored in memory such that it is lost at apower off situation, and will again be read in step 63 after a power-onreset 60. The purpose of the temporarily stored read pseudo-fixedreference identifier will be discussed subsequently.

[0058] In step 65, the library controller compares the read pseudo-fixedreference identifier 31, 32, 33, or 47 to the primary stored copy of thepseudo-fixed reference identifier stored with the primary copy of vitalinformation in the primary non-volatile storage 26 and to the copy ofthe pseudo-fixed reference identifier stored in the backup non-volatilestorage 34, and step 66 determines whether the read pseudo-fixedreference identifier 31, 32, 33, or 47 matches the primary copy of thepseudo-fixed reference identifier.

[0059] If the read pseudo-fixed reference identifier 31, 32, 33, or 47matches the copy of the pseudo-fixed reference identifier stored in theprimary non-volatile storage 26, whether or not the read pseudo-fixedreference identifier matches the copy of the pseudo-fixed referenceidentifier stored in the backup non-volatile storage 34, as indicated bystep 66, then, in step 67, the primary copy of vital information withthe copy of the pseudo-fixed reference identifier is valid, and may beindicated as valid.

[0060] If the read pseudo-fixed reference identifier 31, 32, 33, or 47and the primary copy of the pseudo-fixed reference identifier match,then the primary copy of the vital information is correct, an optionalbackup copy step 69 may be conducted to insure that the backup copy isalso correct and is backed up correctly in the event the backup FRU wasreplaced, or in the event a change was made in the primary copy of thevital information, for example, by updating data stored with the primarycopy. Copying the vital information to the backup, even if the vitalinformation is unchanged, ensures that the backup copy is also up todate and correct. It is therefore possible to keep error data or usagedata with the primary copy of vital information, and to constantlyupdate that data, knowing that the backup copy of the vital informationboth is correct and is updated in step 69.

[0061] If the read pseudo-fixed reference identifier 31, 32, 33, or 47matches only the copy of the pseudo-fixed reference identifier in thebackup non-volatile storage 34, which means that the copy of thepseudo-fixed reference identifier of the primary non-volatile storage 26does not match either the read pseudo-fixed reference identifier or thebackup copy, as indicated by step 70, then, a signal is providedindicating that the backup copy of vital information with the copy ofthe pseudo-fixed reference identifier is to be restore copied to theprimary non-volatile storage 26 as the primary copy in step 71. Therestore copy function is thus conducted automatically, and the correctpseudo-fixed reference identifier is stored, associated with the restorecopied primary copy of vital information.

[0062] In addition to, or as an alternative, a signal is provided instep 72 alerting an operator, for example, at the operator panel 30,that the backup copy matches the read pseudo-fixed reference identifier31, 32, 33, or 47 while the primary does not. The operator may conduct amanual restore, if not done automatically, and may investigate thereason for the primary mismatching the read pseudo-fixed referenceidentifier 31, 32, 33, or 47.

[0063] If the read pseudo-fixed reference identifier 31, 32, 33, or 47fails to match either the copy of the pseudo-fixed reference identifierstored in the primary non-volatile storage 26 or the copy of thepseudo-fixed reference identifier stored in the backup non-volatilestorage 34, as indicated by the lack of matches in either step 66 orstep 70, then, the process continues to step 77.

[0064] As discussed above, if the pseudo-fixed reference identifier 31,32, 33, or 47 cannot be read, as indicated by step 78, the processcontinues to step 77. In step 77, the library controller compares thecopy of the pseudo-fixed reference identifier stored in the primarynon-volatile storage 26 to the copy of the pseudo-fixed referenceidentifier stored in the backup non-volatile storage 34.

[0065] If, as indicated by step 80, the copy of the pseudo-fixedreference identifier stored in the primary non-volatile storage 26 doesnot match the copy of the pseudo-fixed reference identifier stored inthe backup non-volatile storage 34, the process continues at step 82. Instep 82, the library controller 24 provides an error indication, e.g.,to host system 28, and/or to the operator panel 30 to indicate that thevital information may be invalid. Step 81 is an optional step whichstops applications that relate to direct operation of the library whenthe vital information may be invalid. Thus, step 81 effectively stopsnormal operation of the library 10, preventing potential data loss, andpossible (but unlikely) damage to the library.

[0066] If, as indicated by step 80, the copy of the pseudo-fixedreference identifier stored in the primary non-volatile storage 26matches the copy of the pseudo-fixed reference identifier stored in thebackup non-volatile storage 34, the vital information appears valid, butthe pseudo-fixed reference identifier 31, 32, 33, or 47 either does notmatch and may have been misread (from steps 66 and 70), or was not read(from step 78), and the process continues at step 87. In step 87, thelibrary controller 24 may provide a warning indication, e.g., to hostsystem 28, and/or to the operator panel 30. Thus, as indicted by step86, the vital information is indicated as valid, and operation of thelibrary is allowed to continue and is not prevented, since the vitalinformation is valid. Alternatively, this could be considered as a stopcondition.

[0067] As the result, the present invention provides verification of aprimary or backup copy of vital information of an automated data storagelibrary at each reset, when the vital information is subject to change.

[0068] Still referring to FIG. 7, additional verification of thevalidity of the vital information may be conducted either periodicallyas indicated by step 90, or upon a trigger signal as indicated by step91. Either means of additional verification comprises an interim checkwhen no power-on reset has occurred. Without a power-on reset, thelibrary controller 24 has not been replaced; without a detected reset,the program code for the processor has not been changed, and, also, thepseudo-fixed reference identifier 31, 32, 33, or 47 has not beenchanged. Thus, the read pseudo-fixed reference identifier 31, 32, 33, or47 temporarily stored in step 64 is employed in step 93 to eliminate thetime otherwise required to move the positionable reader 40 to themachine readable serial number identifier 47, or to operate the systemto read the pseudo-fixed reference identifier 31, 32, 33. In a preferredembodiment, without a power-on reset, the primary copy of vitalinformation remains valid, as there is no opportunity to change it. Theprimary copy may be updated, as discussed above.

[0069] Step 90 may, for example, comprise a clock of the processor 25,which initiates the validating process on a periodic basis, such as onan hourly basis. Step 91 may, for example, comprise a signal resultingfrom an entry at the operator panel 30 by an operator as the result of aservice menu option, or other service related trigger.

[0070] In response to step 90, or to step 91, the computer processor 25repeats step 65, et seq. In the preferred embodiment, above, steps 70-87are unlikely to be performed without a power-on reset, and backup updatestep 69 will consistently be performed.

[0071] As the result, the present invention provides verification of aprimary and backup copy of vital information of a system, such as anautomated data storage library, periodically (step 90) or at anappropriate occasion (step 91), and allows updating of the backup copyof vital information. This is useful in the situation where the primarycopy of vital information is often updated.

[0072] Those of skill in the art will understand that the steps of FIGS.6 and 7 may be reordered and that equivalent steps may be employed.

[0073] The present invention thus maintains the validity of the primaryand backup copies of the vital information, and checks that validity asneeded.

[0074]FIG. 8 illustrates alternative embedded systems which may employthe present invention to verify the primary and backup copies of vitalinformation. An embedded system may comprise a multi-node processingnetwork system 100 with a plurality of processors 105 coupled in anetwork 106, together with a controller or master processor 108. Anexample of a network comprises a multi-node system of embeddedprocessors. The embedded system comprises a plurality of modules 110,114 with processors at nodes of the system, and the network serves tointerconnect the modules 110, 114 of the system, where the modules haveprogrammable processors 105 to operate the modules and their components111, thereby operating the system. In the illustrated example, theprocessors 105 each comprises a network interface 112 coupling theprocessor in the network, and a non-volatile memory 113, 120 such as aROM, for storing code and information for operating the processor, and aprocessing unit 115 coupled to the non-volatile memory 113, 120 via aninterface 117, to the module components 111 via an interface 118, and tothe network interface 112.

[0075] The controller or master processor 108 comprises a master I/Ointerface 119 coupled in the network, a master processor 125 coupled tothe master I/O interface, and a primary non-volatile storage 126 coupledto the master processor 125 which stores at least the primary copy ofthe vital information for the processors of the network. The mastersource may also comprise a functional node of the network with modulecomponents, etc.

[0076] A backup copy of the vital information is stored, for example, innon-volatile storage 113, which may comprise the non-volatile storage ofprocessor 105 of module 110, or may comprise a separate non-volatilestorage mounted on the same card.

[0077] Examples of embedded systems which require vital informationinclude an aircraft “fly-by-wire” calibration system, a power generationsystem, a power distribution system, a distributed processor automotivesystem, and medical equipment.

[0078] In accordance with the present invention, the pseudo-fixedreference identifier may be located at a reference location of theprocessing system, separate from and coupled to the primary non-volatilestorage 126, and separate from and coupled to the processing unit 125 ofthe computer processor 108, for example, comprising pseudo-fixedreference 131. As another example, the pseudo-fixed reference may befixed at the non-volatile storage 120, unless that is the backup copy,comprising the pseudo-fixed reference 132, or may be fixed as thepseudo-fixed reference 134 which is directly coupled to the processingunit 115 of module 114. A still further example comprises pseudo-fixedreference 133 which is coupled to processing unit 115 of module 110 bymeans of an interface 136. The pseudo-fixed references 131, 132, 134 and133 are separate from and coupled to the primary non-volatile memory 126and the processing unit 125 of the processor 108 by means of network106. Another example of a pseudo-fixed reference 137 is directly coupledto processing unit 125 of the processor 108.

[0079] The function of the pseudo-fixed references to provideverification of the vital information is essentially the same asdescribed with respect to FIGS. 6 and 7. As an example, in theprocessing system of a multi-node system, a pseudo-fixed referenceidentifier 131, 132, 133, 134, or 137 is provided at a referencelocation 131, 120, 105, 115, or 137 of the processing system. Primarynon-volatile storage 126 is provided at a node of the processing system,and is separate from and coupled to the reference location, for storinga primary copy of vital information, and for storing a copy of thepseudo-fixed reference identifier associated with the primary copy ofthe vital information. Backup non-volatile storage 113 is provided inthe processing system, coupled to the primary non-volatile storage 126,via network 106 for storing a backup copy of the vital information, thebackup copy copied from the primary copy of vital information with acopy of the pseudo-fixed reference identifier. A processor 108 iscoupled to the reference location 131, 120, 105, 115, or 137, theprimary non-volatile storage 126 and the backup non-volatile storage113, and, in accordance with an embodiment of a processor implementedmethod, the processor, upon a reset identified by the processor, readsthe pseudo-fixed reference identifier 131, 132, 133, 134, or 137 fromthe reference location 131, 120, 105, 115, or 137. The processorcompares the read pseudo-fixed reference identifier 131, 132, 133, 134,or 137 to the stored copies of the pseudo-fixed reference identifier ofthe primary non-volatile storage 126 and the backup non-volatile storage113. If the read pseudo-fixed reference identifier 131, 132, 133, 134,or 137 matches the primary stored copy of the pseudo-fixed referenceidentifier, the processor indicates that the vital information is valid.The processor may optionally copy the primary copy of vital informationwith the copy of the pseudo-fixed reference identifier to the backupnon-volatile storage 113 as an updated backup copy, as discussed above.If the read pseudo-fixed reference identifier 131, 132, 133,1 134, or137 matches the backup stored copy of the pseudo-fixed referenceidentifier only, the processor indicates that the backup copy of thevital information is to be restore copied to the primary non-volatilestorage as the primary copy.

[0080] There is a remote possibility that a FRU containing the primarynon-volatile storage could be swapped out for a different FRU, and, atsome later date, swapped back in, still storing old vital informationand associated with the correct pseudo-fixed reference identifier. Toprevent use of the old vital information, the technician is provided theopportunity to change or delete the content of the storage representingthe pseudo-fixed reference identifier of a new FRU, before thecomparison is conducted.

[0081] FIGS. 9-13 comprise examples of pseudo-fixed referenceidentifiers.

[0082] Specifically, FIG. 9 illustrates an example of an electronicallyreadable “electronic serial number” 201 fixed in an electronic module202 of the reference location. At the present time, commerciallyavailable non-volatile memory modules from Dallas Semiconductor may beprovided with an “electronic serial number”.

[0083]FIG. 10 illustrates an arrangement of I/O pins 210 at thereference location, such as at a port I/O 211 of a processing unit 212,the port I/O coupled to the data bus 215 of the processing unit.Alternatively, the I/O pins may be directly connected to the processorrather than linked to the data bus. As is known to those of skill in theart, the I/O pins 210 may comprise dedicated I/O pins, either directlywired or with jumpers hung on the pins, or may comprise a tri-statebuffer or gate which is addressed by the processing unit by means of a“chip select” or address on a bus.

[0084]FIG. 11 illustrates one example of settable switches of anelectronic module at the reference location. In the example of FIG. 11,the settable switches comprise manually settable “DIP” switches 220,such as are found in many processing units, and typically coupled to adata bus 221. Another example of settable switches is illustrated inFIG. 12, comprising manually settable multi-position switches 230. As isknown to those of skill in the art, such switches are typicallyhexadecimal switches directly readable on the bus, such as bus 231.Alternatively, the switches may be coupled to a bus on the board of aprocessor.

[0085]FIG. 13 illustrates a non-volatile memory 240 at the referencelocation coupled to a bus 241. Many examples of such devices are knownto those of skill in the art, such as a PROM, battery back-up RAM, fieldprogrammable gate array, or ASIC. The non-volatile memory should be notsubject to update or change in normal operation.

[0086] The pseudo-fixed reference identifiers need not comprise actualserial numbers of the specific devices or system in which they arelocated. Rather, the pseudo-fixed reference identifiers may comprise asoftware-generated pseudo-random number. For example, many compilerssupport a random number generator, or one can be built using code thatcan be implemented simply. Alternatively, the pseudo-random numbergenerator may comprise an output from a millisecond timer running, forexample, since the power-on of the system. Specifically, such a timermay comprise 32 bits, which provides for 4 billion possible numbers.Thus, at first power on of the ROM, the current output of the randomnumber generator may be read and utilized as the pseudo-fixed referenceidentifier.

[0087] If the non-volatile memory gets swapped out, or is deleted, forexample, a battery powered non-volatile RAM loses power, the primary andbackup non-volatile storage copies of the pseudo-fixed referenceidentifier may be compared, and, if they match, the pseudo-fixedreference identifier is replaced in the non-volatile RAM.

[0088] The output of a random number generator may also be obtained by amanufacturing technician and employed for setting the settable “DIP”switches 220 of FIG. 11, or the settable multi-position switches 230 ofFIG. 12.

[0089] Additionally, the pseudo-fixed reference identifiers comprisingthe sensible indicators illustrated in FIGS. 1, 3, 4, 5A and 5B may beprinted or generated employing a random number generator. Further, if aEthernet controller is present, the pseudo-fixed reference identifiermay comprise the MAC address of the controller.

[0090] While the preferred embodiments of the present invention havebeen illustrated in detail, it should be apparent that modifications andadaptations to those embodiments may occur to one skilled in the artwithout departing from the scope of the present invention as set forthin the following claims.

We claim:
 1. A method for verifying primary and backup copies of vitalinformation for an automated data storage library, said library having aplurality of storage shelves for storing data storage media, at leastone accessor for accessing said data storage media in said plurality ofstorage shelves, a machine readable serial number identifier, apositionable reader for reading said machine readable serial numberidentifier, primary and backup non-volatile storage for storing saidprimary and said backup copies of said vital information, and a librarycontroller comprising at least one processor, said library controllercoupled to said accessor, said positionable reader, and to said primaryand backup non-volatile storage, said library controller additionallystoring programs for operating said library in accordance with saidvital information, said method comprising the steps of: storing saidserial number identifier associated with said primary copy of said vitalinformation of said primary non-volatile storage; copying said primarycopy of vital information to said backup non-volatile storage as saidbackup copy associated with said serial number identifier; upon apower-on reset of said processor, operating said positionable reader toread said machine readable serial number identifier; comparing said readserial number identifier to said stored serial number identifiers ofsaid primary non-volatile storage and said backup non-volatile storage;if said read serial number identifier matches said primary stored serialnumber identifier, indicating said primary copy of vital information isvalid; and if said read serial number identifier matches said backupstored serial number identifier only, indicating restore copying of saidbackup copy of vital information to said primary non-volatile storage assaid primary copy associated with said serial number identifier.
 2. Themethod of claim 1, additionally comprising the step of, if, in saidcomparing step, said read serial number identifier matches said primarystored serial number identifier, copying said primary copy of vitalinformation with said serial number identifier to said backupnon-volatile storage as said backup copy.
 3. The method of claim 1,additionally comprising the step of, if, in said comparing step, saidread serial number identifier fails to match either said primary or saidbackup stored serial number identifiers, comparing said primary and saidbackup stored serial number identifiers, and: if said primary storedserial number identifier fails to match said backup stored serial numberidentifier, providing an error indication; and if said primary storedserial number identifier matches said backup stored serial numberidentifier, continuing operation of said library.
 4. The method of claim1, wherein said positionable reader, in said operating step, fails toread said machine readable serial number identifier, said methodadditionally comprising the step of: comparing said primary and saidbackup stored serial number identifiers, and: if said primary storedserial number identifier fails to match said backup stored serial numberidentifier, providing an error indication; and if said primary storedserial number identifier matches said backup stored serial numberidentifier, continuing operation of said library.
 5. The method of claim1, additionally comprising the steps of: temporarily storing saidmachine readable serial number identifier read by said positionablereader; periodically comparing said stored read serial number identifierto said stored serial number identifiers of said primary non-volatilestorage and said backup non-volatile storage, and: if said read serialnumber identifier matches said primary stored serial number identifier,backup copying said primary copy of vital information with said serialnumber identifier to said backup non-volatile storage as said backupcopy.
 6. The method of claim 5, additionally comprising the step ofresponding to an input trigger signal, conducting said comparing step.7. An automated data storage library comprising: a plurality of storageshelves for storing data storage media; at least one accessor foraccessing said data storage media in said plurality of storage shelves;a machine readable serial number identifier positioned at said library;a positionable reader for reading said machine readable serial numberidentifier; primary non-volatile storage for storing a primary copy ofsaid vital information, said serial number identifier stored associatedwith said primary copy of said vital information of said primarynon-volatile storage; backup non-volatile storage for storing a backupcopy of said vital information, said backup copy copied from saidprimary copy of vital information and associated with said serial numberidentifier; and a library controller comprising at least one processorassociated with said primary non-volatile storage, said librarycontroller coupled to said accessor, said positionable reader, and tosaid primary and backup non-volatile storage, said library controllerstoring programs for operating said library in accordance with saidvital information, said library controller: upon a power-on reset ofsaid processor, operates said positionable reader to read said machinereadable serial number identifier; compares said read serial numberidentifier to said stored serial number identifiers of said primarynon-volatile storage and said backup non-volatile storage; if said readserial number identifier matches said primary stored serial numberidentifier, indicates said primary copy of vital information is valid;and if said read serial number identifier matches said backup storedserial number identifier only, indicates restore copying of said backupcopy of vital information to said primary non-volatile storage as saidprimary copy associated with said serial number identifier.
 8. Theautomated data storage library of claim 7, wherein said librarycontroller, in comparing said read serial number identifier to saidstored serial number identifiers of said primary non-volatile storageand said backup non-volatile storage, wherein said read serial numberidentifier matches said primary stored serial number identifier, copiessaid primary copy of vital information with said serial numberidentifier to said backup non-volatile storage as said backup copy. 9.The automated data storage library of claim 7, wherein said librarycontroller, in comparing said read serial number identifier to saidstored serial number identifiers of said primary non-volatile storageand said backup non-volatile storage, wherein said read serial numberidentifier fails to match either said primary or said backup storedserial number identifiers, additionally compares said primary and saidbackup stored serial number identifiers, and: if said primary storedserial number identifier fails to match said backup stored serial numberidentifier, provides an error indication; and if said primary storedserial number identifier matches said backup stored serial numberidentifier, continues operation of said library.
 10. The automated datastorage library of claim 7, wherein said positionable reader fails toread said machine readable serial number identifier, said librarycontroller additionally: compares said primary and said backup storedserial number identifiers, and: if said primary stored serial numberidentifier fails to match said backup stored serial number identifier,provides an error indication; and if said primary stored serial numbermatches said backup stored serial number identifier, continues operationof said library.
 11. The automated data storage library of claim 7,wherein said library controller additionally: temporarily stores saidmachine readable serial number identifier read by said positionablereader; periodically compares said stored read serial number identifierto said stored serial number identifiers of said primary non-volatilestorage and said backup non-volatile storage, and: if said read serialnumber identifier matches said primary stored serial number identifier,backup copies said primary copy of vital information with said serialnumber identifier to said backup non-volatile storage as said backupcopy.
 12. The automated data storage library of claim 11, wherein saidlibrary controller is additionally coupled to an input, and isresponsive to a trigger signal received at said input, conducting saidcomparison function.
 13. The automated data storage library of claim 7,wherein said machine readable serial number identifier comprises a barcode label positioned at a predetermined location of said library,wherein said positionable reader is mounted at said accessor, andwherein said library controller, upon said power-on reset, operates saidaccessor to position said positionable reader at substantially saidpredetermined location to read said bar code label machine readableserial number identifier.
 14. The automated data storage library ofclaim 7, wherein said machine readable serial number identifiercomprises a contactless transceiver positioned at a predeterminedlocation of said library, wherein said positionable reader is mounted atsaid accessor, and wherein said library controller, upon said power-onreset, operates said accessor to position said positionable reader atsubstantially said predetermined location to read said machine readableserial number identifier transmitted by said contactless transceiver.15. A program product usable with a programmable processor havingprocessor readable program code embodied therein, for verifying primaryand backup copies of vital information for an automated data storagelibrary, said library storing data storage media; said library having aplurality of storage shelves for storing data storage media; at leastone accessor for accessing said data storage media in said plurality ofstorage shelves; a machine readable serial number identifier; apositionable reader for reading said machine readable serial numberidentifier; primary and backup non-volatile storage for storing saidprimary and backup copies of said vital information, said serial numberidentifier stored associated with said primary copy of said vitalinformation of said primary non-volatile storage, said backup copycopied from said primary copy of vital information to said backupnon-volatile storage and associated with said serial number identifier;and a library controller coupled to said accessor, said positionablereader, and to said primary and backup non-volatile storage, saidlibrary controller comprising at least one processor storing programsfor operating said library in accordance with said vital information;said program product comprising: processor readable program code whichcauses said at least one library controller processor to, upon apower-on reset of said processor, operate said positionable reader toread said machine readable serial number identifier; processor readableprogram code which causes said at least one library controller processorto compare said read serial number identifier to said stored serialnumber identifiers of said primary non-volatile storage and said backupnon-volatile storage; and processor readable program code which causessaid at least one library controller processor, if said read serialnumber identifier matches said primary stored serial number identifier,to indicate said primary copy of vital information is valid; and, ifsaid read serial number identifier matches said backup stored serialnumber identifier only, to indicate restore copying of said backup copyof vital information to said primary non-volatile storage as saidprimary copy associated with said serial number identifier.
 16. Theprogram product of claim 15, wherein said processor readable programcode which causes said at least one library controller processor tocompare said read serial number identifier to said stored serial numberidentifiers of said primary non-volatile storage and said backupnon-volatile storage, wherein said read serial number identifier matchessaid primary stored serial number identifier, additionally causes saidat least one library controller processor to copy said primary copy ofvital information with a copy of said serial number identifier to saidbackup non-volatile storage as said backup copy.
 17. The program productof claim 15, wherein said processor readable program code which causessaid at least one library controller processor to compare said readserial number identifier to said stored serial number identifiers ofsaid primary non-volatile storage and said backup non-volatile storage,wherein said read serial number identifier fails to match either saidprimary or said backup stored serial number identifiers, additionallycauses said at least one library controller processor to compare saidprimary and said backup stored serial number identifiers, and: if saidprimary stored serial number identifier fails to match said backupstored serial number identifier, to provide an error indication; and ifsaid primary stored serial number identifier matches said backup storedserial number identifier, to continue operation of said library.
 18. Theprogram product of claim 15, wherein said positionable reader fails toread said machine readable serial number identifier, said processorreadable program code additionally causes said at least one librarycontroller processor to compare said primary and said backup storedserial number identifiers, and: if said primary stored serial numberidentifier fails to match said backup stored serial number identifier,to provide an error indication; and if said primary stored serial numberidentifier matches said backup stored serial number identifier, tocontinue operation of said library.
 19. The program product of claim 15,wherein said processor readable program code additionally causes said atleast one library controller processor to: temporarily store saidmachine readable serial number identifier read by said positionablereader; periodically compare said stored read serial number identifierto said stored serial number identifiers of said primary non-volatilestorage and said backup non-volatile storage, and: if said read serialnumber identifier matches said primary stored serial number identifier,to copy said primary copy of vital information with said serial numberidentifier to said backup non-volatile storage as said backup copy. 20.The program product of claim 19, wherein said library controller isadditionally coupled to an input, and wherein said processor readableprogram code additionally causes said at least one library controllerprocessor to respond to a trigger signal received at said input,conducting said comparison function.
 21. A method for verifying primaryand backup copies of vital information for an automated data storagelibrary; said library having a plurality of storage shelves for storingdata storage media; at least one accessor for accessing said datastorage media in said plurality of storage shelves; a machine readableserial number identifier; a positionable reader for reading said machinereadable serial number identifier; primary and backup non-volatilestorage for storing primary and backup copies of said vital information,a copy of said serial number identifier stored associated with saidprimary copy of said vital information of said primary non-volatilestorage, said backup copy copied from said primary copy of vitalinformation to said backup non-volatile storage and associated with saidserial number identifier; and a library controller comprising at leastone computer processor associated with said primary non-volatilestorage, said library controller coupled to said accessor, saidpositionable reader, and to said primary and backup non-volatilestorage, said library controller additionally storing programs foroperating said library in accordance with said vital information; saidmethod comprising the steps of: upon a power-on reset of said computerprocessor, operating said positionable reader to read said machinereadable serial number identifier; comparing said read serial numberidentifier to said stored serial number identifiers of said primarynon-volatile storage and said backup non-volatile storage; if said readserial number identifier matches said primary stored serial numberidentifier, indicating said primary copy of vital information is valid;and if said read serial number identifier matches said backup storedserial number identifier only, indicating restore copying of said backupcopy of vital information to said primary non-volatile storage as saidprimary copy associated with said serial number identifier.
 22. Themethod of claim 21, additionally comprising the step of, if, in saidcomparing step, said read serial number identifier matches said primarystored serial number identifier, copying said primary copy of vitalinformation with a copy of said serial number identifier to said backupnon-volatile storage as said backup copy.
 23. The method of claim 22,additionally comprising the step of, if, in said comparing step, saidread serial number fails to match either said primary or said backupstored serial number identifiers, comparing said primary and said backupstored identifiers, and: if said primary stored serial number identifierfails to match said backup stored serial number identifier, providing anerror indication; and if said primary stored serial number identifiermatches said backup stored serial number identifier, continuingoperation of said library.
 24. The method of claim 21, wherein saidpositionable reader, in said operating step, fails to read said machinereadable serial number identifier, said method additionally comprisingthe step of: comparing said primary and said backup stored serial numberidentifiers, and: if said primary stored serial number identifier failsto match said backup stored serial number identifier, providing an errorindication; and if said primary stored serial number identifier matchessaid backup stored serial number identifier, continuing operation ofsaid library.
 25. The method of claim 21, additionally comprising thesteps of: temporarily storing said machine readable serial numberidentifier read by said positionable reader; periodically comparing saidstored read serial number identifier to said stored serial numberidentifiers of said primary non-volatile storage and said backupnon-volatile storage, and: if said read serial number identifier matchessaid primary stored serial number identifier, copying said primary copyof vital information with said serial number identifier to said backupnon-volatile storage as said backup copy.
 26. The method of claim 25,additionally comprising the step of responding to an input triggersignal, conducting said comparing step.
 27. A method for verifyingprimary and backup copies of vital information for a processing system,said system having at least one processor and having primary and backupnon-volatile storage for storing said primary and said backup copies ofsaid vital information, said method comprising the steps of: providing apseudo-fixed reference identifier separate from and coupled to said atleast one processor; storing a copy of said pseudo-fixed referenceidentifier associated with said primary copy of said vital informationof said primary non-volatile storage; copying said primary copy of vitalinformation to said backup non-volatile storage as said backup copyassociated with a copy of said pseudo-fixed reference identifier; upon areset identified by said processor, reading said pseudo-fixed referenceidentifier; comparing said read pseudo-fixed reference identifier tosaid stored copies of said pseudo-fixed reference identifier of saidprimary non-volatile storage and said backup non-volatile storage; if,in said comparing step, said read pseudo-fixed reference identifiermatches said primary stored copy of said pseudo-fixed referenceidentifier, indicating said vital information is valid; and if, in saidcomparing step, said read pseudo-fixed reference identifier matches saidbackup stored copy of said pseudo-fixed reference identifier only,indicating restore copying of said backup copy of vital information tosaid primary non-volatile storage as said primary copy associated withsaid copy of said pseudo-fixed reference identifier.
 28. The method ofclaim 27, wherein said valid indicating step additionally comprisescopying said primary copy of vital information with a copy of saidpseudo-fixed reference identifier to said backup non-volatile storage assaid backup copy.
 29. The method of claim 27, additionally comprisingthe step of, if, in said comparing step, said read pseudo-fixedreference identifier fails to match either said primary or said backupstored copies of said pseudo-fixed reference identifier, comparing saidprimary and said backup stored copies of said pseudo-fixed referenceidentifier, and: if said primary stored copy of said pseudo-fixedreference identifier fails to match said backup stored copy of saidpseudo-fixed reference identifier, providing an error indication; and ifsaid primary stored copy of said pseudo-fixed reference identifiermatches said backup stored copy of said pseudo-fixed referenceidentifier, indicating said vital information is valid.
 30. The methodof claim 27, wherein, upon said reading step failing to read saidpseudo-fixed reference identifier, said method additionally comprisingthe step of: comparing said primary and said backup copies of saidstored serial number identifier, and: if said primary stored copy ofsaid serial number identifier fails to match said backup stored copy ofsaid serial number identifier, providing an error indication; and ifsaid primary stored copy of said pseudo-fixed reference identifiermatches said backup stored copy of said pseudo-fixed referenceidentifier, indicating said vital information is valid.
 31. The methodof claim 27, additionally comprising the steps of: periodically readingsaid pseudo-fixed reference identifier; comparing said read pseudo-fixedreference identifier to said stored copies of said pseudo-fixedreference identifiers of said primary non-volatile storage and saidbackup non-volatile storage, and: if said read pseudo-fixed referenceidentifier matches said primary stored copy of said pseudo-fixedreference identifier, copying said primary copy of vital informationwith said copy of said pseudo-fixed reference identifier to said backupnon-volatile storage as said backup copy.
 32. The method of claim 31,additionally comprising the step of responding to an input triggersignal, conducting said periodically reading step.
 33. A multi-nodeprocessing system comprising: a pseudo-fixed reference identifier at areference location of said processing system; primary non-volatilestorage at a node of said processing system, and separate from andcoupled to said reference location, for storing a primary copy of vitalinformation, and for storing a copy of said pseudo-fixed referenceidentifier associated with said primary copy of said vital informationin said primary non-volatile storage; backup non-volatile storage insaid processing system coupled to said primary non-volatile storagenode, for storing a backup copy of said vital information, said backupcopy copied from said primary copy of vital information and associatedwith a copy of said pseudo-fixed reference identifier; and at least oneprocessor coupled to said reference location, said primary non-volatilestorage and said backup non-volatile storage, said processor: upon areset identified by said processor, reads said pseudo-fixed referenceidentifier from said reference location; compares said read pseudo-fixedreference identifier to said stored copies of said pseudo-fixedreference identifier of said primary non-volatile storage and saidbackup non-volatile storage; if said read pseudo-fixed referenceidentifier matches said primary stored copy of said pseudo-fixedreference identifier, indicates said vital information is valid; and ifsaid read pseudo-fixed reference identifier matches said backup storedcopy of said pseudo-fixed reference identifier only, indicates restorecopying of said backup copy of vital information to said primarynon-volatile storage as said primary copy associated with said copy ofsaid pseudo-fixed reference identifier.
 34. The multi-node processingsystem of claim 33, wherein said processor, in indicating said vitalinformation is valid, additionally copies said primary copy of vitalinformation with a copy of said pseudo-fixed reference identifier tosaid backup non-volatile storage as said backup copy.
 35. The multi-nodeprocessing system of claim 33, wherein said processor, in comparing saidread pseudo-fixed reference identifier to said stored copies of saidpseudo-fixed reference identifier of said primary non-volatile storageand said backup non-volatile storage, wherein said read pseudo-fixedreference identifier fails to match either said primary or said backupstored copy of said pseudo-fixed reference identifier, additionallycompares said primary and said backup stored copies of said pseudo-fixedreference identifier, and: if said primary stored copy of saidpseudo-fixed reference identifier fails to match said backup stored copyof said pseudo-fixed reference identifier, provides an error indication;and if said primary stored copy of said pseudo-fixed referenceidentifier matches said backup stored copy of said pseudo-fixedreference identifier, indicates said vital information is valid.
 36. Themulti-node processing system of claim 33, wherein said processor failsto read said pseudo-fixed reference identifier, said processoradditionally: compares said primary and said backup stored copies ofsaid pseudo-fixed reference identifier, and: if said primary stored copyof said pseudo-fixed reference identifier fails to match said backupstored copy of said pseudo-fixed reference identifier, provides an errorindication; and if said primary stored copy of said pseudo-fixedreference identifier matches said backup stored copy of saidpseudo-fixed reference identifier, indicates said vital information isvalid.
 37. The multi-node processing system of claim 33, wherein saidprocessor additionally: periodically reads said pseudo-fixed referenceidentifier; compares said read pseudo-fixed reference identifier to saidstored copies of said pseudo-fixed reference identifier of said primarynon-volatile storage and said backup non-volatile storage, and: if saidread pseudo-fixed reference identifier matches said primary stored copyof said pseudo-fixed reference identifier, backup copies said primarycopy of vital information with said copy of said pseudo-fixed referenceidentifier to said backup non-volatile storage as said backup copy. 38.The multi-node processing system of claim 37, wherein said multi-nodeprocessing system additionally comprises an input, and wherein saidprocessor is responsive to a trigger signal received at said input,conducting said comparison function.
 39. The multi-node processingsystem of claim 33, wherein said pseudo-fixed reference identifiercomprises an electronically readable “electronic serial number” fixed inan electronic module of said reference location.
 40. The multi-nodeprocessing system of claim 33, wherein said pseudo-fixed referencecomprises an arrangement of I/O pins at said reference location.
 41. Themulti-node processing system of claim 33, wherein said pseudo-fixedreference comprises settable switches of an electronic module at saidreference location.
 42. The multi-node processing system of claim 41,wherein said settable switches of said pseudo-fixed reference comprisemanually settable “DIP” switches.
 43. The multi-node processing systemof claim 41, wherein said settable switches of said pseudo-fixedreference comprise manually settable multi-position switches.
 44. Themulti-node processing system of claim 33, wherein said pseudo-fixedreference comprises a non-volatile memory at said reference location.45. The multi-node processing system of claim 33, wherein saidpseudo-fixed reference comprises a reader and a sensible indicatorreadable by said reader.
 46. A program product usable with aprogrammable processor having processor readable program code embodiedtherein, for verifying primary and backup copies of vital informationassociated with said programmable processor, said primary and backupcopies of vital information stored respectively in primary and backupnon-volatile storage coupled to said programmable processor; saidprogrammable processor coupled to a pseudo-fixed reference identifierseparate from said primary non-volatile storage and from saidprogrammable processor, a copy of said pseudo-fixed reference identifierstored associated with said primary copy of said vital information ofsaid primary non-volatile storage, said backup copy copied from saidprimary copy of vital information to said backup non-volatile storageand associated with a copy of said pseudo-fixed reference identifier;said program product comprising: processor readable program code whichcauses said programmable processor to, upon a reset identified by saidprogrammable processor, read said pseudo-fixed reference identifier;processor readable program code which causes said programmable processorto compare said read pseudo-fixed reference identifier to said storedcopies of said pseudo-fixed reference identifier of said primarynon-volatile storage and said backup non-volatile storage; and processorreadable program code which causes said programmable processor to, ifsaid read pseudo-fixed reference identifier matches said primary storedcopy of said pseudo-fixed reference identifier, indicate said vitalinformation is valid; if said read pseudo-fixed reference identifiermatches said backup stored copy of said pseudo-fixed referenceidentifier only, causes said programmable processor to indicate restorecopying of said backup copy of vital information to said primarynon-volatile storage as said primary copy associated with said copy ofsaid pseudo-fixed reference identifier.
 47. The program product of claim46, wherein said processor readable program code which causes saidprogrammable processor to indicate said vital information is valid,additionally causes said programmable processor to copy said primarycopy of vital information with a copy of said pseudo-fixed referenceidentifier to said backup non-volatile storage as said backup copy. 48.The program product of claim 46, wherein said processor readable programcode which causes said programmable processor to compare said readpseudo-fixed reference identifier to said stored copies of saidpseudo-fixed reference identifier of said primary non-volatile storageand said backup non-volatile storage, wherein said read pseudo-fixedreference identifier fails to match either said primary or said backupstored copies of said pseudo-fixed reference identifier, additionallycauses said programmable processor to compare said primary and saidbackup stored copies of said pseudo-fixed reference identifier, and: ifsaid primary stored copy of said pseudo-fixed reference identifier failsto match said backup stored copy of said pseudo-fixed referenceidentifier, to provide an error indication; and if said primary storedcopy of said pseudo-fixed reference identifier matches said backupstored copy of said pseudo-fixed reference identifier, to indicate saidvital information is valid.
 49. The program product of claim 46, whereinsaid programmable processor fails to read said pseudo-fixed referenceidentifier, said processor readable program code additionally causessaid programmable processor to compare said primary and said backupstored copies of said pseudo-fixed reference identifier, and: if saidprimary stored copy of said pseudo-fixed reference identifier fails tomatch said backup stored copy of said pseudo-fixed reference identifier,to provide an error indication; and if said primary stored copy of saidpseudo-fixed reference identifier matches said backup stored copy ofsaid pseudo-fixed reference identifier, to indicate said vitalinformation is valid.
 50. The program product of claim 46, wherein saidprocessor readable program code additionally causes said programmableprocessor to: periodically read said pseudo-fixed reference identifierread by said positionable reader; compare said read pseudo-fixedreference identifier to said stored copies of said pseudo-fixedreference identifier of said primary non-volatile storage and saidbackup non-volatile storage, and: if said read pseudo-fixed referenceidentifier matches said primary stored copy of said pseudo-fixedreference identifier, to copy said primary copy of vital informationwith said copy of said pseudo-fixed reference identifier to said backupnon-volatile storage as said backup copy.
 51. The program product ofclaim 50, wherein said programmable processor is additionally coupled toan input, and wherein said processor readable program code additionallycauses said programmable processor to respond to a trigger signalreceived at said input, conducting said comparison function.
 52. Aprocessor coupled to primary non-volatile storage, and to backupnon-volatile storage, said primary non-volatile storage for storing aprimary copy of vital information, said backup non-volatile storage forstoring a backup copy of said vital information, said processorcomprising: a pseudo-fixed reference identifier at a reference location;a processor element coupled to and separate from said referencelocation, and coupled to said primary and said backup non-volatilestorage, said processor element: storing a copy of said pseudo-fixedreference identifier associated with said primary copy of said vitalinformation of said primary non-volatile storage; storing a backup copyof said vital information in said backup non-volatile storage, saidbackup copy copied from said primary copy of vital information andassociated with a copy of said pseudo-fixed reference identifier; upon areset identified by said processor, reading said pseudo-fixed referenceidentifier from said reference location; comparing said readpseudo-fixed reference identifier to said stored copies of saidpseudo-fixed reference identifier of said primary non-volatile storageand said backup non-volatile storage; and if said read pseudo-fixedreference identifier matches said primary stored copy of saidpseudo-fixed reference identifier, indicates said vital information isvalid; and if said read pseudo-fixed reference identifier matches saidbackup stored copy of said pseudo-fixed reference identifier only,indicates restore copying of said backup copy of vital information tosaid primary non-volatile storage as said primary copy associated withsaid copy of said pseudo-fixed reference identifier.
 53. The processorof claim 52, wherein said processor element, in indicating said vitalinformation is valid, additionally copies said primary copy of vitalinformation with a copy of said pseudo-fixed reference identifier tosaid backup non-volatile storage as said backup copy.
 54. The processorof claim 52, wherein said processor element, in comparing said readpseudo-fixed reference identifier to said stored copies of saidpseudo-fixed reference identifier of said primary non-volatile storageand said backup non-volatile storage, wherein said read pseudo-fixedreference identifier fails to match either said primary or said backupstored copy of said pseudo-fixed reference identifier, additionallycompares said primary and said backup stored copies of said pseudo-fixedreference identifier, and: if said primary stored copy of saidpseudo-fixed reference identifier fails to match said backup stored copyof said pseudo-fixed reference identifier, provides an error indication;and if said primary stored copy of said pseudo-fixed referenceidentifier matches said backup stored copy of said pseudo-fixedreference identifier, indicates said vital information is valid.
 55. Theprocessor of claim 52, wherein said processor element fails to read saidpseudo-fixed reference identifier, said processor element additionally:compares said primary and said backup stored copies of said pseudo-fixedreference identifier, and: if said primary stored copy of saidpseudo-fixed reference identifier fails to match said backup stored copyof said pseudo-fixed reference identifier, provides an error indication;and if said primary stored copy of said pseudo-fixed referenceidentifier matches said backup stored copy of said pseudo-fixedreference identifier, indicates said vital information is valid.
 56. Theprocessor of claim 52, wherein said processor element additionally:periodically reads said pseudo-fixed reference identifier; compares saidread pseudo-fixed reference identifier to said stored copies of saidpseudo-fixed reference identifier of said primary non-volatile storageand said backup non-volatile storage, and: if said read pseudo-fixedreference identifier matches said primary stored copy of saidpseudo-fixed reference identifier, backup copies said primary copy ofvital information with said copy of said pseudo-fixed referenceidentifier to said backup non-volatile storage as said backup copy. 57.The processor of claim 56, wherein said processor additionally comprisesan input, and wherein said processor element is responsive to a triggersignal received at said input, conducting said comparison function. 58.The processor of claim 52, wherein said pseudo-fixed referenceidentifier comprises an electronically readable “electronic serialnumber” fixed in an electronic module of said reference location. 59.The processor of claim 52, wherein said pseudo-fixed reference comprisesan arrangement of I/O pins at said reference location.
 60. The processorof claim 52, wherein said pseudo-fixed reference comprises settableswitches of an electronic module at said reference location.
 61. Theprocessor of claim 60, wherein said settable switches of saidpseudo-fixed reference comprise manually settable “DIP” switches. 62.The processor of claim 60, wherein said settable switches of saidpseudo-fixed reference comprise manually settable multi-positionswitches.
 63. The processor of claim 52, wherein said pseudo-fixedreference comprises a non-volatile memory at said reference location.64. The processor of claim 52, wherein said pseudo-fixed referencecomprises a reader and a sensible indicator readable by said reader. 65.A modular processing system comprising: a plurality of functionalmodules, each operated by at least one processor; a pseudo-fixedreference identifier at a reference location of said modular processingsystem; primary non-volatile storage at a node of said processingsystem, and separate from and coupled to said reference location, forstoring a primary copy of vital information, and for storing a copy ofsaid pseudo-fixed reference identifier associated with said primary copyof said vital information of said primary non-volatile storage, whereinat least one of said processors operates an associated functional modulein accordance with said vital information; backup non-volatile storagein said processing system coupled to said primary non-volatile storage,for storing a backup copy of said vital information, said backup copycopied from said primary copy of vital information and associated with acopy of said pseudo-fixed reference identifier; and at least oneprocessor coupled to said reference location, said primary non-volatilestorage and said backup non-volatile storage, said processor: upon areset identified by said processor, reads said pseudo-fixed referenceidentifier from said reference location; compares said read pseudo-fixedreference identifier to said stored copies of said pseudo-fixedreference identifier of said primary non-volatile storage and saidbackup non-volatile storage; if said read pseudo-fixed referenceidentifier matches said primary stored copy of said pseudo-fixedreference identifier, indicates said primary copy of vital informationis valid; and if said read pseudo-fixed reference identifier matchessaid backup stored copy of said pseudo-fixed reference identifier only,indicates restore copying of said backup copy of vital information tosaid primary non-volatile storage as said primary copy associated withsaid copy of said pseudo-fixed reference identifier.
 66. The modularprocessing system of claim 65, wherein said processor, in comparing saidread pseudo-fixed reference identifier to said stored copies of saidpseudo-fixed reference identifier of said primary non-volatile storageand said backup non-volatile storage, wherein said read pseudo-fixedreference identifier matches said primary stored copy of saidpseudo-fixed reference identifier, copies said primary copy of vitalinformation with a copy of said pseudo-fixed reference identifier tosaid backup non-volatile storage as said backup copy.
 67. The modularprocessing system of claim 65, wherein said processor, in comparing saidread pseudo-fixed reference identifier to said stored copies of saidpseudo-fixed reference identifier of said primary non-volatile storageand said backup non-volatile storage, wherein said read pseudo-fixedreference identifier fails to match either said primary or said backupstored copy of said pseudo-fixed reference identifier, additionallycompares said primary and said backup stored copies of said pseudo-fixedreference identifier, and: if said primary stored copy of saidpseudo-fixed reference identifier fails to match said backup stored copyof said pseudo-fixed reference identifier, provides an error indication;and if said primary stored copy of said pseudo-fixed referenceidentifier matches said backup stored copy of said pseudo-fixedreference identifier, indicates continued operation of said at least oneof said processors operating said associated functional module inaccordance with said vital information.
 68. The modular processingsystem of claim 65, wherein said processor fails to read saidpseudo-fixed reference identifier, said processor additionally: comparessaid primary and said backup stored copies of said pseudo-fixedreference identifier, and: if said primary stored copy of saidpseudo-fixed reference identifier fails to match said backup stored copyof said pseudo-fixed reference identifier, provides an error indication;and if said primary stored copy of said pseudo-fixed referenceidentifier matches said backup stored copy of said pseudo-fixedreference identifier, indicates continued operation of said at least oneof said processors operating said associated functional module inaccordance with said vital information.
 69. The modular processingsystem of claim 65, wherein said processor additionally: periodicallyreads said pseudo-fixed reference identifier; compares said readpseudo-fixed reference identifier to said stored copies of saidpseudo-fixed reference identifier of said primary non-volatile storageand said backup non-volatile storage, and: if said read pseudo-fixedreference identifier matches said primary stored copy of saidpseudo-fixed reference identifier, backup copies said primary copy ofvital information with said copy of said pseudo-fixed referenceidentifier to said backup non-volatile storage as said backup copy. 70.The modular processing system of claim 69, wherein said multi-nodeprocessing system additionally comprises an input, and wherein saidprocessor is responsive to a trigger signal received at said input,conducting said comparison function.
 71. The modular processing systemof claim 65, wherein said pseudo-fixed reference identifier comprises anelectronically readable “electronic serial number” fixed in anelectronic module of said reference location.
 72. The modular processingsystem of claim 65, wherein said pseudo-fixed reference comprises anarrangement of I/O pins at said reference location.
 73. The modularprocessing system of claim 65, wherein said pseudo-fixed referencecomprises settable switches of an electronic module at said referencelocation.
 74. The modular processing system of claim 73, wherein saidsettable switches of said pseudo-fixed reference comprise manuallysettable “DIP” switches.
 75. The modular processing system of claim 73,wherein said settable switches of said pseudo-fixed reference comprisemanually settable multi-position switches.
 76. The modular processingsystem of claim 65, wherein said pseudo-fixed reference comprises anon-volatile memory at said reference location.
 77. The modularprocessing system of claim 65, wherein said pseudo-fixed referencecomprises a reader and a sensible indicator readable by said reader. 78.The modular processing system of claim 65, wherein said modularprocessing system comprises an automated data storage library storingdata storage media; said library having a plurality of storage shelvesfor storing data storage media; at least one accessor for accessing saiddata storage media in said plurality of storage shelves; and a librarycontroller coupled to said accessor, said library controller comprisingat least one computer processor storing programs for operating saidaccessor in accordance with said vital information, and wherein saidassociated functional module operated by said processor in accordancewith said vital information comprises said library controller.
 79. Amethod for verifying primary and backup copies of vital information fora processing system, said system having at least one processor, having apseudo-fixed reference identifier separate from and coupled to said atleast one processor, and having primary and backup non-volatile storagefor storing said primary and said backup copies of said vitalinformation, a copy of said pseudo-fixed reference identifier storedassociated with said primary copy of said vital information of saidprimary non-volatile storage, said backup copy copied from said primarycopy of vital information to said backup non-volatile storage associatedwith said pseudo-fixed reference identifier, said method comprising thesteps of: upon a reset identified by said processor, reading saidpseudo-fixed reference identifier; comparing said read pseudo-fixedreference identifier to said stored copies of said pseudo-fixedreference identifier of said primary non-volatile storage and saidbackup non-volatile storage; if said read pseudo-fixed referenceidentifier matches said primary stored copy of said pseudo-fixedreference identifier, indicating said vital information is valid; andif, in said comparing step, said read pseudo-fixed reference identifiermatches said backup stored copy of said pseudo-fixed referenceidentifier only, indicating restore copying of said backup copy of vitalinformation to said primary non-volatile storage as said primary copyassociated with said copy of said pseudo-fixed reference identifier. 80.The method of claim 79, wherein said step of indicating said vitalinformation is valid additionally comprises copying said primary copy ofvital information with a copy of said pseudo-fixed reference identifierto said backup non-volatile storage as said backup copy.
 81. The methodof claim 79, additionally comprising the step of, if, in said comparingstep, said read pseudo-fixed reference identifier fails to match eithersaid primary or said backup stored copies of said pseudo-fixed referenceidentifier, comparing said primary and said backup stored copies of saidpseudo-fixed reference identifier, and: if said primary stored copy ofsaid pseudo-fixed reference identifier fails to match said backup storedcopy of said pseudo-fixed reference identifier, providing an errorindication; and if said primary stored copy of said pseudo-fixedreference identifier matches said backup stored copy of saidpseudo-fixed reference identifier, indicating said vital information isvalid.
 82. The method of claim 79, wherein, upon said reading stepfailing to read said pseudo-fixed reference identifier, said methodadditionally comprising the step of: comparing said primary and saidbackup copies of said stored serial number identifier, and: if saidprimary stored copy of said serial number identifier fails to match saidbackup stored copy of said serial number identifier, providing an errorindication; and if said primary stored copy of said pseudo-fixedreference identifier matches said backup stored copy of saidpseudo-fixed reference identifier, indicating said vital information isvalid.
 83. The method of claim 79, additionally comprising the steps of:periodically reading said pseudo-fixed reference identifier; comparingsaid read pseudo-fixed reference identifier to said stored copies ofsaid pseudo-fixed reference identifiers of said primary non-volatilestorage and said backup non-volatile storage, and: if said readpseudo-fixed reference identifier matches said primary stored copy ofsaid pseudo-fixed reference identifier, copying said primary copy ofvital information with said copy of said pseudo-fixed referenceidentifier to said backup non-volatile storage as said backup copy. 84.The method of claim 83, additionally comprising the step of respondingto an input trigger signal, conducting said periodically reading step.85. An identifier, in a processing system having a processor element, aprimary non-volatile storage, and a backup non-volatile storage, saidprimary non-volatile storage storing a primary copy of vital informationassociated with said processor, and said backup non-volatile storagestoring a backup copy of said vital information, said backup copy copiedfrom said primary copy, said identifier comprising: a pseudo-fixedreference identifier separate from said at least one processor; and acoupling between said pseudo-fixed reference identifier and saidprocessing system, such that said pseudo-fixed reference identifier isreadable by said processing system, such that (1) a copy of saidpseudo-fixed reference identifier is read by said processing system andstored associated with said primary copy of said vital information ofsaid primary non-volatile storage, (2) said backup copy copied from saidprimary copy of vital information to said backup non-volatile storageand associated with a copy of said pseudo-fixed reference identifier,(3) upon a reset identified by said processor, said pseudo-fixedreference identifier is read by said processing system, (4) saidprocessor compares said read pseudo-fixed reference identifier to saidstored copies of said pseudo-fixed reference identifier of said primarynon-volatile storage and said backup non-volatile storage; and (5a) ifsaid read pseudo-fixed reference identifier matches said primary storedcopy of said pseudo-fixed reference identifier, said processor indicatesthat said vital information is valid, and (5b) if said read pseudo-fixedreference identifier matches said backup stored copy of saidpseudo-fixed reference identifier only, said processor indicates saidbackup copy of said vital information is to be restore copied to saidprimary non-volatile storage as said primary copy.